Sandbox setting for macOS service lookups now warns that it can reach outside

The sandbox is a restricted space where Claude Code runs commands so they cannot freely touch the rest of your computer. On macOS, one sandbox setting lists the system services that sandboxed commands may look up, called Mach lookups. Its description now warns: "Each entry lets sandboxed commands reach services outside the sandbox, and the sandbox does not confine what those services do for them."